Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier: GaIIlvTuO0WjlqxjbBx/L/x+FAVw9CvMaTzgUKNEfcc=
Subject key identifier: AE:8B:34:BA:A9:C6:B6:6E:A3:A7:24:9E:90:A9:19:24:6B:39:95:5A
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer: /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial: 5B7410310A611298504E60EB6FF426BB09D3F7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number: 027D
Signing time: Sat 23 Aug 2025 12:18:55 +0000
Manifest this update: Sat 23 Aug 2025 12:13:55 +0000
Manifest next update: Sun 24 Aug 2025 12:27:55 +0000
Files and hashes: 1: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: 9LWLJC/CS8sOfArHPeCb8VXjodevg9GVDezV1/woQjw=)
2: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: 7mZLRKvuFYQEt5llFo3C42apPRYsq7DIp8n3lExiBw4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:74:10:31:0a:61:12:98:50:4e:60:eb:6f:f4:26:bb:09:d3:f7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Validity
Not Before: Aug 23 12:13:55 2025 GMT
Not After : Aug 24 12:27:55 2025 GMT
Subject: CN=AE8B34BAA9C6B66EA3A7249E90A919246B39955A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:a6:e1:c0:08:bf:13:aa:9f:26:cc:e7:22:
bc:92:f4:a4:d6:06:11:12:1d:62:52:14:af:11:c5:
33:f7:20:5e:f7:49:2b:1e:3a:10:71:7e:d5:27:6f:
97:cf:50:74:3a:24:5b:b8:75:5a:7d:cf:a9:13:85:
74:e8:44:72:7b:d8:1f:2b:a6:e0:3f:18:63:b1:29:
1a:eb:85:ba:79:9d:9a:98:de:e0:8b:a0:bb:48:cc:
06:55:94:fb:09:75:73:4b:70:28:4c:a7:cc:2c:17:
2d:14:0a:93:b1:b0:5c:89:7c:87:9b:8e:99:dc:7a:
93:2d:12:60:68:03:79:df:50:8d:b8:f2:d2:ae:e5:
d0:13:62:4c:6f:d4:ee:04:a5:a8:b0:80:41:d8:10:
d9:4a:3f:05:75:1f:dc:ae:31:ed:d1:8c:d7:43:87:
49:5e:0f:f2:d5:19:b0:71:c0:50:5b:9c:c0:7f:b4:
8f:1d:7a:d2:73:5d:2d:ab:cd:ef:a7:26:22:48:6f:
2f:ca:df:b7:d0:27:aa:89:9c:04:e9:df:70:c6:bc:
36:17:70:a2:a6:9b:84:ac:d4:ca:35:53:cc:85:54:
39:6c:c2:0d:28:59:45:8d:36:e6:22:87:ed:90:8f:
d7:dc:40:71:70:6e:72:94:2c:a0:5e:93:9a:bd:31:
56:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:34:BA:A9:C6:B6:6E:A3:A7:24:9E:90:A9:19:24:6B:39:95:5A
X509v3 Authority Key Identifier:
keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1b:37:23:48:be:a9:ef:0f:94:52:dd:aa:aa:8f:7f:ee:10:
4c:04:f1:33:e5:ef:d6:b7:25:97:35:df:5a:ef:19:6e:87:b9:
32:f9:59:4f:51:05:17:a7:2e:f9:0d:65:cc:d7:59:c9:4b:ca:
d7:36:a6:b5:ae:f9:5c:a3:99:96:c9:4a:73:5e:7a:2c:6b:90:
18:a5:30:d3:dc:11:28:cd:68:85:28:e3:99:ee:68:2f:ef:ca:
d4:6b:84:16:8b:c7:08:fc:f0:f1:34:83:ba:2f:54:79:32:64:
df:e8:07:ac:83:fd:6f:a3:5d:5c:6b:43:8b:91:f5:92:47:52:
8a:18:cf:09:b9:0e:48:52:7a:d3:a5:95:42:2a:52:2f:cb:33:
f2:84:25:14:d7:09:47:04:54:b7:9e:99:a2:da:88:f1:6d:bb:
4d:8e:7e:32:71:2b:38:22:a2:63:1c:57:65:49:7a:f5:cf:14:
94:5a:82:dc:b8:72:ef:02:2a:7c:35:95:78:8d:eb:8b:8c:22:
53:a0:4f:06:fc:c2:f7:4d:88:f3:c4:c2:17:0e:36:5d:24:72:
f3:19:a7:31:8c:95:89:94:6f:50:e7:a6:1c:ae:32:7f:8e:4e:
22:e3:82:0d:cf:6c:04:05:06:51:b0:38:fe:49:f4:18:f3:13:
52:a1:27:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:23:04 2025 by rpki-client